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DECLARATION OF KAI ULLRICH UNDER 37 CJF.R. § 1.131 
' ' LKaiO. Ullrich, ourrently residing at Untere Strasse 10, 691 17 Heidelberg, Germany, do 
hereby declare as follows: \ : "■• 

1 I am the inventor of the subject matter claimed in the above-identified patent application. 
•2. Prior to May 23 2003, 1 invented the subject matter of the claiuWbf this patent application 
while being employed at SAP AG, which currently has a place of business at Neurottstrasse 16, . 
69190 Walldorf, Germany. At least as early as April 3. 2003, 1 conceived of and proceeded to 
diligently reduce to practice" the invention claimed in the above-referenced patent application. 

3 . The conception and redaction to practice prior at least as early as April 3, 2003 is 
•evidenced by a written invention disclosure form, which was the basis of the above-referenced ■ 
patent application, and which 1 prepared for submission to in-house patent counsel at SAP AG on 
or about April 3, 2003. The invention disclosure contents describe the invention, and a redacted . 
copy of the invention disclosure form is included along with this declaration as Schedule A. 

4 . • • Moreover, after conception, and prior to the filing date of the parent application on or 
before June 27, 2003. SAP AG in-house patent counsel engaged .and worked diligently with 
patent attorneys, including Mr. James Cleary, formerly of Fish & Richardson. PC, to prepare a 
patent application that described the conceived invention. After this diligent preparation work, 
the parent application was filed on June 27. 2003 . 

5. I hereby declare that all statements made herein of my own knowledge are true and that 
all statements made on information and belief are believed to be true; and further that these 
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punishable oy ™ <» »«• ^ validity of the application or any 

Code and that such willful false statements may jeopardize the validity PP. 

patent issued thereon. 

r Respectfully submitted, 

Diced jO/g/^ — JLJJM^L- 

Daced ' " Kai O.Ullrich 
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SAP Invention Disclosure Form 
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An authscheme describes an algorithm used for authenticating a user of a software 
system, what data is required for the authentication, and the interactions that must 
take place for the authentication process to occur. Different applications may require 
different authschemes. For instance, administrative applications may require a 
higher-priority authscheme than normal application due to access to sensitive data. 
Further, different types of data could require "stronger" or "weaker" user 
authentication. In common internet based software systems, user authentication 
usually takes place globally. Once the user authentication has taken place the 
method how the end user proved his identity is no more taken into account when an 
access control decision is to be made. The decision whether access to a resource .s 
granted or not is only made based on the identity of the user, not on how this ident.ty 
was proven. 
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Authschemes can be associated to resources in such a software system Every < i me 
a resource fs being accessed by a user the software system checks whether the user 
did loo \r Previously using a certain authscheme. Thereby the system makes sure 
IIS us P e% Tdertity was proven by an authentication mechanism of a certa.n 



strength 




Is the invention an improvement or an existing SAP product? 



^T[>3 Please identify the product (Component of e.g. R/3, New 
Dimension,. mySAP.com etc.). 

Enterprise Portal 6.0 
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Herewith I / We declare that I am / We are the solely and true inventors. 
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